Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/7918jeDcIeSJXbD16xxGwzri6_4.roa
File: 7918jeDcIeSJXbD16xxGwzri6_4.roa (raw, json)
Hash identifier: OQCYlsdbEYMUMcdfr++Yt7VINvKQ1QgUov/whsjb0xQ=
Subject key identifier: EF:DD:7C:8D:E0:DC:21:E4:89:5D:B0:F5:EB:1C:46:C3:3A:E2:EB:FE
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 0196CD0664558971557CF86236E66E8AF725
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/7918jeDcIeSJXbD16xxGwzri6_4.roa
Signing time: Wed 14 May 2025 04:21:10 +0000
ROA not before: Wed 14 May 2025 04:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209470
IP address blocks: 2a13:2200:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:06:64:55:89:71:55:7c:f8:62:36:e6:6e:8a:f7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: May 14 04:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efdd7c8de0dc21e4895db0f5eb1c46c33ae2ebfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:0e:01:53:96:b9:bf:4a:9d:ab:51:65:6c:
1d:5f:c7:24:dc:81:75:17:3c:d9:87:44:1e:85:91:
11:10:fa:3e:cc:eb:72:ba:23:4e:18:d7:fa:5f:ae:
04:e1:54:3e:1c:0a:d1:27:a9:31:fd:76:29:21:4a:
b6:7a:a9:00:f5:d6:d2:5e:64:d8:ce:aa:6d:65:28:
c6:18:44:30:80:0c:6f:56:de:f9:ef:59:a9:61:99:
bf:99:8e:71:fa:17:79:e9:31:e7:96:24:78:35:1f:
6d:61:8c:15:12:fd:70:96:40:81:6a:77:20:3a:5b:
20:8b:85:4f:fe:22:68:64:50:f0:95:d2:c7:93:58:
4a:a0:9f:8d:5c:b5:91:f4:e9:32:49:98:13:80:79:
5c:04:b6:bf:e0:0c:e5:d6:e0:92:71:c3:25:d1:45:
2b:62:d3:cd:0e:43:3b:24:5e:c8:ee:de:7a:00:98:
a2:42:d7:0c:d2:f9:b6:be:ca:de:f5:b2:f6:2d:4c:
5d:32:4a:72:81:6b:e6:79:59:ee:49:27:bf:76:91:
f2:e5:2f:3d:45:5c:d4:33:44:2b:b5:f9:db:04:e0:
86:80:97:72:72:82:cf:a2:eb:69:ec:31:44:b6:5b:
b5:d4:3c:bf:95:81:d0:87:9f:46:4d:55:73:6b:26:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DD:7C:8D:E0:DC:21:E4:89:5D:B0:F5:EB:1C:46:C3:3A:E2:EB:FE
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/7918jeDcIeSJXbD16xxGwzri6_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2200:d::/48
Signature Algorithm: sha256WithRSAEncryption
71:a9:87:3c:fb:b4:65:08:9d:4b:36:32:2a:ef:95:fb:72:b2:
94:81:a5:f2:f5:99:c7:ec:9f:20:d1:28:69:a8:d5:14:fc:ad:
3e:db:36:61:f2:af:6f:b9:f5:84:28:b4:33:69:93:09:b9:cc:
bd:bb:29:1b:3a:2f:f6:4a:6c:44:bb:15:90:74:db:51:34:05:
ab:04:09:57:79:9d:d5:85:dc:44:10:d3:6c:2e:6b:54:f8:b2:
f7:48:13:b2:9f:61:5c:1f:24:0e:5f:73:2c:10:fc:71:ab:5d:
6b:e2:03:89:8a:2f:13:3c:a8:17:4a:52:96:ef:59:66:24:22:
ee:15:8d:4d:32:88:d7:ef:bb:c7:cc:5b:80:a4:64:46:f2:de:
4f:cc:0d:e8:d5:0a:1a:1b:a4:35:8d:fc:e5:8e:5e:9c:19:73:
7c:fc:1e:1c:ca:b0:af:31:09:eb:7f:ec:9b:17:2b:4e:f6:5c:
6b:7f:33:0d:c5:1e:59:82:39:ee:6e:11:7a:23:98:74:9e:c2:
0e:e8:4f:9b:a8:c6:ac:8f:ae:f5:7a:2e:33:87:05:ee:6d:44:
4b:11:f2:fb:47:75:94:53:29:61:94:b4:76:85:3b:66:34:f4:
51:35:ef:36:a8:f3:83:50:be:75:8d:2c:f0:4b:70:06:72:f8:
34:67:82:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:45:32 2025 by rpki-client